FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Feb 3, 2025 | Nov 29, 2024 |
| Ffmpeg | — | Upgrade to FFmpeg version 7.0 | Jun 5, 2025 | Nov 29, 2024 |
| Suse | — | Upgrade libavfilter6-32bitUpgrade ffmpeg-4-libavresample-develUpgrade libavcodec57-32bitUpgrade libpostproc54Upgrade libswresample3_9Upgrade libswscale5_9Upgrade ffmpeg-4-libavfilter-develUpgrade libswscale4Upgrade libswscale8Upgrade libswresample-develUpgrade libswresample3_9-32bitUpgrade ffmpeg-4-libswresample-develUpgrade libavformat-develUpgrade libavresample3-32bitUpgrade libavutil-develUpgrade ffmpeg-4-private-develUpgrade libavfilter-develUpgrade libavresample4_0-32bitUpgrade libswresample2Upgrade libavutil55-32bitUpgrade libavformat58_76Upgrade libswscale4-32bitUpgrade libpostproc54-32bitUpgrade ffmpeg-7Upgrade ffmpeg-4-libavformat-develUpgrade ffmpeg-4-libswscale-develUpgrade libavfilter7_110Upgrade libavcodec-develUpgrade libswscale-develUpgrade libavformat58_76-32bitUpgrade libavdevice61Upgrade libavutil59Upgrade libpostproc55_9Upgrade libavresample-develUpgrade libavdevice-develUpgrade libavformat57Upgrade libavresample3Upgrade libavcodec61Upgrade libswresample5Upgrade libavutil56_70Upgrade libavdevice58_13Upgrade ffmpeg-4-libavcodec-develUpgrade libavdevice58_13-32bitUpgrade libavformat61Upgrade libavdevice57-32bitUpgrade libavfilter7_110-32bitUpgrade libpostproc55_9-32bitUpgrade libswscale5_9-32bitUpgrade libavcodec57Upgrade ffmpeg-4-libpostproc-develUpgrade ffmpeg-4-libavdevice-develUpgrade libavcodec58_134-32bitUpgrade libpostproc58Upgrade libavfilter10Upgrade libavcodec58_134Upgrade ffmpegUpgrade libswresample2-32bitUpgrade libavutil56_70-32bitUpgrade libavdevice57Upgrade libpostproc-develUpgrade ffmpeg-4Upgrade ffmpeg-4-libavutil-develUpgrade libavfilter6Upgrade libavformat57-32bitUpgrade libavutil55Upgrade ffmpeg-private-develUpgrade libavresample4_0 | Dec 5, 2025 | Jul 17, 2025 |
| Ubuntu | — | Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-dev (Ubuntu Pro) | Jun 26, 2025 | Nov 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub